Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EpRPldtRMrfKPCeEtqzIX-N_ZQU.roa
File: EpRPldtRMrfKPCeEtqzIX-N_ZQU.roa (raw, json)
Hash identifier: X22S67KKAmeOZbZNYbSGn7dP8i5mLBFKlZ1eq80sPwM=
Subject key identifier: 12:94:4F:95:DB:51:32:B7:CA:3C:27:84:B6:AC:C8:5F:E3:7F:65:05
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C32
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EpRPldtRMrfKPCeEtqzIX-N_ZQU.roa
Signing time: Mon 08 Apr 2024 20:22:34 +0000
ROA not before: Mon 08 Apr 2024 20:22:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15410 (0x3c32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 20:22:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=12944F95DB5132B7CA3C2784B6ACC85FE37F6505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:76:89:14:da:2e:0a:71:dd:30:f0:e5:62:
6f:98:b4:fc:35:26:d7:be:dd:81:e1:7a:ec:52:96:
59:52:c8:86:ab:9a:50:61:7c:08:b3:fd:99:c0:9f:
e8:e7:ff:6b:2d:19:56:6f:5d:71:50:42:ea:63:9d:
dc:71:b6:da:ac:55:4e:c1:1a:1a:89:8b:e0:21:08:
f3:84:29:17:81:2a:6c:ab:6e:06:c3:5b:31:46:4a:
2e:e1:df:ae:5b:6e:00:ef:95:a7:1f:df:4e:ae:a3:
21:51:26:8a:06:bf:90:d2:09:39:36:2e:46:27:45:
30:2f:88:ea:78:ff:a9:9b:cd:ef:bc:1f:91:f9:3b:
32:b5:d7:71:31:42:43:ed:b0:bf:3c:1f:5a:d1:af:
5e:39:28:46:10:be:95:c5:be:6f:94:32:66:59:57:
a5:e3:a9:37:2d:96:9c:ab:a5:96:70:0c:78:4a:70:
31:34:14:a2:78:74:32:8b:b8:51:aa:0c:f8:e1:37:
e6:b6:b6:23:2c:1d:e1:ad:25:68:66:4e:5b:11:24:
7d:25:8a:03:57:ad:29:c3:c2:67:9a:16:3e:07:4d:
5e:11:45:69:aa:0a:a9:d2:81:d7:c6:da:a3:42:53:
41:dc:d6:89:7e:8e:cf:0b:71:1d:92:58:7a:71:c1:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:94:4F:95:DB:51:32:B7:CA:3C:27:84:B6:AC:C8:5F:E3:7F:65:05
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EpRPldtRMrfKPCeEtqzIX-N_ZQU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:64:01:2a:5a:1b:ea:d2:68:1e:ff:00:27:0c:4d:4c:8f:4a:
f5:b9:5e:dd:6c:ce:c6:0f:3b:ab:eb:0f:82:c2:03:f5:ad:05:
7b:51:95:39:f3:d0:b4:b2:03:3f:a6:98:21:f4:92:dd:81:23:
5a:23:a2:5b:7f:d6:6a:2f:19:de:0a:93:b2:06:a0:ab:d5:47:
bb:5d:92:05:90:de:33:73:d2:5c:a5:07:ba:8f:e2:1d:62:69:
5a:49:ac:24:15:6d:21:87:79:85:b2:53:7c:a7:8a:49:9a:b7:
34:ba:22:38:01:15:86:dd:18:69:0f:fd:73:b6:6f:12:43:39:
f3:1a:ca:dc:20:d0:89:54:45:73:77:c5:09:b5:85:93:59:57:
aa:e0:f5:e1:ee:c5:94:f4:59:75:67:3b:f2:bc:71:68:db:37:
3b:98:c9:28:07:06:93:5f:ed:d6:5d:54:0e:1f:46:f3:0d:60:
9c:db:90:03:21:fc:40:66:dc:a9:15:4c:95:c5:f4:b0:77:12:
10:85:78:ea:54:c0:5a:38:52:03:40:b1:1f:5e:1e:f6:c0:63:
69:9d:8f:a9:7a:1f:d0:fa:a7:8b:e4:2f:68:57:ae:cc:44:f3:
88:2a:6a:f4:88:7e:e4:03:61:27:25:9e:0b:e3:c6:02:09:38:
bb:fd:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 06:31:45 2024 by rpki-client on console.sobornost.net